Portfolio

On this page
Kastuv Tuladhar

Hi 👋, I’m Kastuv M. Tuladhar, and I go by ~K2.

I’m a Senior Network Engineer at Sanford Health, with routing and switching at the core of my work. I design, operate, and troubleshoot enterprise networks, supporting wired/wireless connectivity and network security. My goal is to make networks simpler, more secure, resilient, and reliable.

I am also focusing on simplifying operations through API integration and workflow automation, and explore how automation, LLMs, and AI agents can support everyday engineering.

This site is where I share practical guides, lab experiments, and lessons from work and study through blog posts and a notebook.

Certifications 📜

  • Cisco Certified DevNet Specialist (CCNP Automation) CiscoEarned 2025-10-1Expires 2029-10-1 Verify
  • Cisco Certified Network Professional (CCNP Enterprise) CiscoEarned 2025-10-1Expires 2029-10-1 Verify

Work Experience 👷🏻

  1. Senior Network Engineer

    Sanford HealthMar 2019 – Present

    At Sanford Health, I design and operate resilient network services that support clinical care and business applications.

    • list one
    • list two

    Major IT Projects

    • DDI consolidation and Infoblox as Single Source of Truth (SSOT) → Consolidated DNS, DHCP, and IP address management from QIP, Microsoft DHCP, and Excel into Infoblox to standardize enterprise administration. Massive boost in IT Operation.

    • Meraki SDWAN deployment → Designed a highly available Meraki headend using a multi-hub architecture with BGP. Deployed centrally managed networks with consistent site configurations and operational standards for home radiologist and long-term care facilities.

    • SD-Access fabric deployment → Deployed regional Cisco Catalyst Center instances and Cisco SD-Access fabrics supporting both fabric and non-fabric wireless. Took a leading role in deploying largest SDA fabric within organization at Sanford SMC Sioux Falls Campus.

    • Cisco ISE cluster design → Designed distributed Cisco ISE services and planned upgrades for network access control and device administration. Integrated multiple tools to enrich endpoint profiling.

    • Enterprise SD-WAN deployment → Implemented Cisco SD-WAN connectivity with routing policies, transport redundancy, and application-aware path selection.

    • Merger & Acquisition (M&A) Network Integration → Designed and migrated network infrastructure to integrate acquired environments, maintaining connectivity for clinical and business applications while incorporating network security and segmentation. I lead Network portion of Black Hills M&A from design to deployments and supported Goodsam, Prairie Lakes Health System, Marshfield Health and North Memorial Healtcare.

    • Cloud Networking: AWS and Azure Landing Zones Accelerators → Supported on cloud network deployment projects for Infrascture as Code (IaC) initiatives.

    IT Security Driven Projects

    • Secure Network Program - Network Access Control with Macro-segmentation and Micro-segmentation → Developed segmentation designs to control access between clinical, business, and infrastructure systems. Deployed wired 802.1X/MAB authentication using IBNS 2.0, ISE endpoint profiling, and xDome integration through the SD-Access fabric.

    • Elisity Deployments → Supported Elisity rollout for identity based network access on multiple sites.

    • Gigamon/xDome/Cisco Secure Network Analytics(SNA) → Involved in designs and integrations of multiple security tools in enterprise.

    Automation/Workflow Projects

    • Grafana Dashboard Visibility → Designed multiple dashboards like: Total workfrom home users (during COVID); Public Internet bandwidth tracking (5 seconds accuracy). Used Telegraf, InfluxDB with telemetry and SNMP.
    • Automated Email with Data Visualization → Weekly email automated that used python/sql/bash and css/html for email designs about Hardware footprints changes and User Reports as requested by leadership.
    • LogicMonitor, Solarwinds and Infoblox Custom CLI tool design → High efficient CLI tools designed to boost the workflow to track networks, monitor hardware, query location and to even access sites with fuzzy search.

    Technical Environment

    AreaTechnologies and tools
    Enterprise networkingCisco Catalyst Center, Cisco SDWAN, Cisco Meraki; Devices → Cisco Catalyst and Nexus switches and routers; Meraki MR and MX platforms.
    Protocols and architectureBGP, EIGRP, OSPF, VXLAN/EVPN, LISP, QoS etc
    Network securityFirewalls, VPNs, threat management, and access control: Cisco Firepower/ASA, FortiGate, Cisco ISE, Medigate, and Check Point.
    Monitoring and analyticsLogicMonitor, ThousandEyes, SolarWinds, Grafana, Prometheus, and Telegraf.
    Servers and virtualizationCisco UCS, Citrix NetScaler, VMware, KVM, and Dell.

  2. Graduate Assistant · Network Security

    University of South DakotaJan 2017 – Dec 2018

    • Researched scalable authentication, certificate revocation, and secure key distribution for vehicular ad hoc networks (VANETs).
    • Proposed a hierarchical certificate revocation architecture using regional revocation lists and dual Bloom filters to address storage and certificate verification tradeoffs.
    • Designed a domain-based group key distribution scheme to reduce repeated key establishment as vehicles moved between roadside units.
    • Built network and vehicle mobility simulations using NS-2, Tcl, and SUMO, incorporating OpenStreetMap data to evaluate key establishment frequency and group key utilization.
    • Published IEEE conference papers. Further research is listed on my Google Scholar profile.

    IEEE Publications

    I authored and co-authored these papers while working as a Research Assistant at the University of South Dakota. My research focused on networking and security for autonomous driving.

  3. Data Communication Engineer

    Huawei TechnologiesJun 2014 – Dec 2017

    • Led IP-RAN network design using hierarchical VPNs, MP-BGP, MPLS/IP-VPN, and traffic engineering for mobile backbones. Configured 3G/4G and Layer 2 enterprise services across more than 10,000 network elements.
    • Migrated carrier and backbone networks from TDM to IP for NCELL-AXIATA and Nepal Telecom as a vendor.

    Major Projects

    • Kathmandu Modernization Project Ncell

      Consolidated DNS, DHCP, and IP address management from QIP, Microsoft DHCP, and Excel into Infoblox to standardize enterprise administration.

    • BRAS Project Ncell

    Technical Environment

    AreaTechnologies and Tools
    Platforms and architectureHuawei ATN series; IP-RAN access, aggregation, and radio service gateways (CSG/ASG/RSG)
    Routing and VPNsMP-BGP, MPLS, MPLS Layer 3 VPNs (IP-VPN), hierarchical VPNs (HVPN)
    Mobile backhaulIP-RAN design and transport connectivity for 3G/4G mobile networks
    Enterprise servicesLayer 2 enterprise connectivity and service provisioning
    Traffic engineeringMPLS/IP backbone traffic engineering and transport path design

Education 🎓

Awards 🏆

  • Best Paper Award, IEEE UEMCON 2018.
  • IT Graduate Assistantship Award during M.S. in Computer Science (two years).
  • Recognized among the top three new employees at Huawei Nepal.